Lucene search

K
nvd[email protected]NVD:CVE-2023-28613
HistoryApr 04, 2023 - 4:15 p.m.

CVE-2023-28613

2023-04-0416:15:07
CWE-190
web.nvd.nist.gov
7
samsung exynos
integer overflow
ipv4 fragment
insufficient parameter validation

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.003

Percentile

69.0%

An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments.

Affected configurations

Nvd
Node
samsungexynos_1280_firmwareMatch-
AND
samsungexynos_1280Match-
Node
samsungexynos_2200_firmwareMatch-
AND
samsungexynos_2200Match-
Node
samsungexynos_modem_5300_firmwareMatch-
AND
samsungexynos_modem_5300Match-
VendorProductVersionCPE
samsungexynos_1280_firmware-cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*
samsungexynos_1280-cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*
samsungexynos_2200_firmware-cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*
samsungexynos_2200-cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*
samsungexynos_modem_5300_firmware-cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*
samsungexynos_modem_5300-cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.003

Percentile

69.0%

Related for NVD:CVE-2023-28613